Desparation spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 Apr 2024 10:16:00 -0600

Received: from mail-ej1-f42.google.com ([209.85.218.42]:50438)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ruE88-00000000LBp-0GxF

for dave@doctor.nl2k.ab.ca;

Tue, 09 Apr 2024 10:15:31 -0600

Received: by mail-ej1-f42.google.com with SMTP id a640c23a62f3a-a4715991c32so793287866b.1

for ; Tue, 09 Apr 2024 09:13:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1712679207; x=1713284007; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=mP/AzVCSX8wI8qxWE5m2/dDKF2smgJbYOpJOUmxgnzU=;

b=YAW62hLNmQRk6Rj/r4lmBR0oGE/Pk02nqpNG9sVYfrozfYjebJgWrAQe2O7TZFcZ8J

dfuS/K6wxdHwU0QAiK73qOnBLVPe+ra6SvHB4hQ/JJL5t/7wpxGgJr5H5Tfn/sLivkhF

FZbPOascmWbdiL3g/+sfY1v3abNSwnEYuCHkPGwxie7liZdrPX6RI5ElotkH19dOqap6

e2HJt7LESdyH4VRsL/RK2PaKn+PrerXUZuH4KTRCAWhiIr9lqf7sv6AeUy1lXM9xPEe0

C8+REOAYQpTuwP6Y9RUaNycmWIwsoK48rrc3w91DnQX3Gl6HXxef1rvWr5Mwwj76lNPA

2vpA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1712679207; x=1713284007;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=mP/AzVCSX8wI8qxWE5m2/dDKF2smgJbYOpJOUmxgnzU=;

b=migITvDgUBBz85LEL/Bw58uOw4PqWMujb6/cXtB3pb9AVpp8jEc6oU5DdfcYOM9faS

KAAKJ8T8LSzwk9Vogctg5qVomQN8nN10tW2pDcZgtLMANFar0WcJDc5PvKJuPfO7Yu0P

Zoxkd2rl3QvLJr7EVFnqxZ3hyhMEh+eKPQJo6EJVGS+x2Y1LQ5xy/kKz5uGmV4odRyMq

K69i6yJRpVk3qV2xPfoG0ZUbMpA01CcAe3mJWiLQ4sGXuBUbDUgPam9nPjg0pVO9Fac0

53xcdgboJ2bJxmplXv6NXyQX8uqZeQeroGC3zJCoiziV48Oa23YW8C2XYXvSzbzGJ19V

GPqA==

X-Forwarded-Encrypted: i=1; AJvYcCX97o7RYV3wmYk17F9hRKHNGUVb1FUBpnYgxoJEQu7adb/bfOXvqa0MyBeTck3Zbpn9wvxliiCh0oETyFu91AOTBjxFXjXv

X-Gm-Message-State: AOJu0YzMNhEMRH4ne1V20SDhXb5ywSpgRlWw86LsukefVqctDv0Yows3

d0OpXRjxzIkKkyWDEH6HX6kz6LHbuHkiVEbNrT5ykBWmfm6vCsu/LZgIOtKMQ3nIxbmzMqu7D1S

atwozkvAaYCtoysUstYjeQz1ttFYrs3XcprbLrA==

X-Google-Smtp-Source: AGHT+IGcJ4U6XIJTMEY/l7bFFCginX8QQPhLXrcXYERSUH77ObfGDwVnoNsgMlZd/aBATmva6mk2XDuqaqKsD5Xd5/4=

X-Received: by 2002:a50:d60f:0:b0:56e:2452:f864 with SMTP id

x15-20020a50d60f000000b0056e2452f864mr9251042edi.35.1712678854166; Tue, 09

Apr 2024 09:07:34 -0700 (PDT)

MIME-Version: 1.0

From: "Mrs.Margaret Williams"

Date: Wed, 10 Apr 2024 04:02:19 -0700

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b791410615ac1e54"

Bcc: dave@doctor.nl2k.ab.ca

X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message

X-Antivirus-Status: Clean



--000000000000b791410615ac1e54

Content-Type: text/plain; charset="UTF-8"



Did you receive my previous message??



--000000000000b791410615ac1e54

Content-Type: text/html; charset="UTF-8"



Did you receive my previous message??




--000000000000b791410615ac1e54--

Instragam followers spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 Apr 2024 10:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ruEA0-00000000MdB-14nN

for dave@doctor.nl2k.ab.ca;

Tue, 09 Apr 2024 10:17:24 -0600

Resent-From: The Doctor

Resent-Date: Tue, 9 Apr 2024 10:17:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f207.google.com ([209.85.219.207]:42028)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ruDgg-0000000022a-2dAx

for sales@nk.ca;

Tue, 09 Apr 2024 09:47:10 -0600

Received: by mail-yb1-f207.google.com with SMTP id 3f1490d57ef6-dd0ae66422fso11026205276.0

for ; Tue, 09 Apr 2024 08:45:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1712677505; x=1713282305; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=wiU8t6E9KSIMHi7uAywLZBPbr+q3H8S+vd73QHuaUew=;

b=OTYO929kLBDQv8v973mKeC7jTZE5u10KkeQOANe+D8XBv8nQEnqjvIiO9XclnS5pPj

G+KoTA1Slsnu3XgtkwZOj3UO7IYqrOnLoI/q0DfO5/KSuT/NfixDipXMxxHQaiK5dSdd

P5l8u/b53uUo1OtxkEVgi/somYhAiBcsAqNyWqbujdjcmU6RLP770oC386BbncOZGPEM

BhxYm3+pTxlURqqw45QsWk4AcIs8q0xlkKvXESwrP8ysa42iLdZz+wqyjiV+pLpRYMrq

DFsVnzqZgws82yGO53YI9xZ9QGvCDnPEbS77IxRaLrc79L7EFqxMxzJ6EWOjFPcMYoS2

pXQw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1712677505; x=1713282305;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=wiU8t6E9KSIMHi7uAywLZBPbr+q3H8S+vd73QHuaUew=;

b=JM5flTWbeEkqqR1/g484N/Vsyc5xGQK5cQC2gxY5+cDiZbuR3nEsMYQf1xmjPE/IfM

m3LoLjeAqvoMa+2YmMGVKJFz/jOSrbgG4knTONveUDSZsP6a2PT4riCRMgv3d4OUN3hl

BvlQpUXnE5FAJbGE7SWrQJ3x0kklsKkAaphZVaafk7n2Myn7Yb+rY9ioQ+VD2ACK2Nqh

acU/dbr3rb2agn7TEd8PuJtwuQrwEsOMLE/bz7uwVdDRhba6eHlNXb0h/DkStFnoPW20

4crgJHw5vN6+R1MKqSISK9326hO/nguWj15FCoFtkqo23mUYgzZpsyd0h8aZXOzpa4y4

ydMA==

X-Gm-Message-State: AOJu0Yyc/ZT0UJ7HxK2wnhvESlsYfa7+4CsS4EJOsY8uRXApNgi7YIxb

Gd4F/qqdlEWTcRnPTWpVcS1A/5x4ievH0fxjk8W14/xwH7cTOf8PhrKXUFyMM2zE78oFbtqick9

4qDXW

X-Google-Smtp-Source: AGHT+IHT6aMGuHegkxjxlfS5P4mdgBqu/xYzzhecwpMNLMcIAqat5MXOZK0+SD47MJuDLY6E2dgkV1bRPw==

MIME-Version: 1.0

X-Received: by 2002:a5b:74a:0:b0:dd3:f55f:ff02 with SMTP id

s10-20020a5b074a000000b00dd3f55fff02mr675481ybq.1.1712677505570; Tue, 09 Apr

2024 08:45:05 -0700 (PDT)

Message-ID:

Date: Tue, 09 Apr 2024 15:45:05 +0000

Subject: netknowyeg,Gifts 15K IG Followers here

From: diansila44@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message

X-Antivirus-Status: Clean



SGkgLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIElu

c3RhZ3JhbSBOT1csDQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93IENoZWFwZXIuDQoN

ClsgaHR0cHM6Ly9iaXQubHkvaW5zdGFtYXhzaG9wP25ldGtub3d5ZWcgXQ0KDQpEbyB5b3UgaGF2

ZSBhYm91dCBbIExlc3MgdGhhbiA1MEsgXSBGb2xsb3dlcnMgPw0KSW5jcmVhc2UgTm93IC4uISEh

IE9mZiA0MCUgVG9kYXkuLi4hISENCg0KLSBJbnN0YW50DQotIFNhZmVzdCBNZXRob2RzDQotIFBy

aXZhY3kgUHJvdGVjdGlvbg0KLSBTcGVlZCA1MEsgLSAxMDBLIEZvbGxvd2Vycy9kYXkNCi0gSGln

aCBRdWFsaXR5IEZvbGxvd2VycyAmIFJlYWwNCi0gRHJvcC1CYWNrIEd1YXJhbnRlZQ0KLSBUcnVz

dGVkDQotIFN0YXJ0aW5nIGdldCA1SyBGb2xsb3dlcnMgSW5zdGFncmFtDQoNCiggVGhyZWFkcywg

SW5zdGFncmFtLCBUd2l0dGVyLCBZb3V0dWJlLCBGYWNlYm9vaywgZXRjLiApDQoNCg0KDQpUaGFu

ayB5b3UsDQpSZWdhcmRzLA0KDQoNCkNvcHlyaWdodCDCqSAyMDE0IC0gMjAyNSBJbnN0YW1lZGlh

UHJvTUFYLiBBbGwgUmlnaHRzIFJlc2VydmVkLg0K

Bitvavo phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 Apr 2024 03:50:00 -0600

Received: from [146.19.191.154] (port=55077 helo=tube-hosting.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ru86x-00000000P1d-1yxb

for dave@doctor.nl2k.ab.ca;

Tue, 09 Apr 2024 03:49:56 -0600

From: "Bitvavo" ;

To: dave@doctor.nl2k.ab.ca

Subject: Ingebrekke stelling: Onderneem direct actie

Date: 9 Apr 2024 12:47:56 +0300

Message-ID: <20240409124756.177D604AB7F89447@info.bitvavo.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Geachte klant, U ontvangt dit bericht omdat uw Bitvavo registratie,

en daarbij ook uw inschrijving over 2 werkdagen op inactief zal staan geregistreerd.

Deze maatregel wordt toegepast omdat u enige tijd gebruik maak [...]



Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: mashizadesigns.co.za]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: mashizadesigns.co.za]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: mashizadesigns.co.za]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=tube-hosting.com;ip=146.19.191.154;r=doctor.nl2k.ab.ca]

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[146.19.191.154 listed in bl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.1 TW_JV BODY: Odd Letter Triples with JV

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Ingebrekke stelling: Onderneem direct actie

X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message

X-Antivirus-Status: Clean















=20=20=20=20





=20=20=20=20


pse: separate; background-color: rgb(246, 246, 246);" bgcolor=3D"#f6f6f6" b=

order=3D"0" cellspacing=3D"0" cellpadding=3D"0">

p" style=3D"font-family: sans-serif; font-size: 14px; vertical-align: top;"=


argin: 0px auto; padding: 10px; width: 580px; font-family: sans-serif; font=

-size: 14px; vertical-align: top; display: block; max-width: 580px;">


display: block; max-width: 580px;">



=20=20=20=20=20=20=20=20=20=20=20=20


55, 255, 255); border-radius: 3px; width: 100%; border-collapse: separate;"=

>

nt-family: sans-serif; font-size: 14px; vertical-align: top;">


se: separate;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=


cal-align: top;">

=09=09=09=09=09=20=20


14px; font-weight: normal;">
der-color: rgb(0, 0, 0); width: 211px; height: 94px;" src=3D"https://th.bin=

g.com/th/id/OIP.neTguRhgM9hJmWWsMGWqzwHaDS?rs=3D1&amp;pid=3DImgDetMain"=

>


14px; font-weight: normal;">




font-weight: normal;">Geachte klant,






font-weight: normal;">U ontvangt dit bericht omdat uw Bitvavo registratie,=

en daarbij ook uw inschrijving over 2 werkdagen op inacti=

ef zal staan geregistreerd. Deze maatregel wordt toegepast omdat u enige ti=

jd gebruik maakt van verouderde registratiegegevens.






font-weight: normal;">Na meerdere contact pogingen hebben wij niets vanuit=

u vernomen en zijn wij daarom genoodzaakt om maatregelen uit te voeren. Hi=

ernaast riskeert de u ook een boete bedrag van €5.2=

00,-
.






font-weight: normal;">Om te voorkomen dat uw registratie definitief w=

ordt uitgeschreven uit het Bitvavo register kunt u nog eenmalig&n=

bsp;gratis uw profiel gegev=

ens online actualiseren. Vanuit de Bitvavo is het voor consumente=

n verplicht hun gegevens up to date te houden.






font-weight: normal;">Wij vertrouwen erop u hiermee voldoende te hebben ge=

informeerd.






font-weight: normal;">






r-collapse: separate;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
ody>

nt-family: sans-serif; font-size: 14px; vertical-align: top;">


lspacing=3D"0" cellpadding=3D"0">
ble>


top" style=3D"border-radius: 5px; text-align: center; font-family: sans-ser=

if; font-size: 14px; vertical-align: top; background-color: rgb(52, 152, 21=

9);" bgcolor=3D"#3498db">
om_zimbra_url" role=3D"link">
5_com_zimbra_url" role=3D"link">


x solid rgb(52, 152, 219); border-image: none; color: rgb(255, 255, 255); t=

ext-transform: capitalize; font-size: 14px; font-weight: bold; text-decorat=

ion: none; display: inline-block; background-color: rgb(52, 152, 219);" hre=

f=3D"http://mashizadesigns.co.za/viv" target=3D"_blank" rel=3D"nofollow noo=

pener noreferrer">Ga naar Inloggen



font-weight: normal;">Hoogachtend,


nt-family: sans-serif; font-size: 14px; font-weight: normal;">


yle=3D"margin: 0px 0px 15px; font-family: sans-serif; font-size: 14px; font=

-weight: normal;">Bitvavo




t-size: 14px; font-weight: normal;'>
_DWT1428_com_zimbra_url" role=3D"link">
FIX_DWT1436_com_zimbra_url" role=3D"link">


4UCkVeuqplxJ1uioal2TasPv0xUNh7z8_fKNjuh7hjp5S3IiZgpxQw2AkYWEaq2tbFFrOWFkyw2=

C0A6gt2FqNg4OJbNMUxk1WyQWh7X2x9pfXnt-Sen98Xris-49b2bXT8nI9dFhhNYeo1O-e-e8oN=

5yZb1GUrYBOQJdSyvf7fIRIj3w8dgGd3N2yfS0TQtnIgM6vLo_Oe_KiUkwbeeJ8IMl4htlZMf6r=

sifVT6RwfkxZafUXAAD__4ZsT8I" target=3D"_blank" rel=3D"nofollow noopener nor=

eferrer">





=09=09=09=09=09=09


">

t: 10px;">



        


=




=3D"link">
ole=3D"link">


BgZpSQ6dOXYocnWMbWwrStSJ5-uKh0P3nh-_qCG8xPSBgyRsSYWIelBw1QxDanpU5C6HYDFwai2=

KSXHjejtZqp9CrcWq9Ms5MyBaQ3RDEOlxeB3or_P35eaHGDB_3pu_88nKLKq1y1bFq-c9-ClNmG=

8xE91w1XSX7SvallHp_zDFlfNbXuLPdLdvX4kE2liVwYXV1diFgqFpOuGFAqkdkBEd4OiqCP9Lp=

H-k7Yzo-umkV_w0AAP__9gxPgQ" target=3D"_blank" rel=3D"nofollow noopener nore=

ferrer">

















=20=20=20=20=20=20=20=20=20=20=20=20


margin-top: 10px;">


separate;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">


align=3D"center" class=3D"content-block" valign=3D"top" style=3D"text-align=

: center; color: rgb(153, 153, 153); padding-top: 10px; padding-bottom: 10p=

x; font-family: sans-serif; font-size: 12px; vertical-align: top;">


color: rgb(153, 153, 153); font-size: 12px; font-weight: bold;">
s=3D"Object" id=3D"OBJ_PREFIX_DWT1430_com_zimbra_url" role=3D"link">
lass=3D"Object" id=3D"OBJ_PREFIX_DWT1438_com_zimbra_url" role=3D"link">


Wachtwoord vergeten?
OBJ_PREFIX_DWT1431_com_zimbra_url" role=3D"link">
=3D"OBJ_PREFIX_DWT1439_com_zimbra_url" role=3D"link">


text-decoration: underline;" href=3D"https://email.mailing.myhorsez.com/c/=

eJx00L1urDAQhuGrsbtF4D-gcMFqDzoKUqpUaSKDBzAy9sqeBO1efUQRKU3qeTSf9E4GYYnpoQM=

c2QMiJGq1ZKOioCvVNrJuqkrSVUthOTelkJzNU2PVOLaiVZVhDTOTNTV1mnVDqLbh-n_Al6N8fb=

5fkdfD2533nXX_lijTxjYViSi_9kuYM_V6RbxnwjvCesL64ziK_bHGlOFZTHEnrJ9jWiJaQON8J=

rz_zJCC2YHwm4_eEaZgN84TfjNhM0U2IUAgokTwEACLEeh5_3BWM97SpP9kqE94ORXqny6XX13O=

6fOP4kKW3wEAAP__reRnjw" target=3D"_blank" rel=3D"nofollow=20

noopener noreferrer">Nieuw wachtwoord aanvragen

an>
.


Wil je geen e-mail van ons ontvangen?
=3D"Object" id=3D"OBJ_PREFIX_DWT1432_com_zimbra_url" role=3D"link">
ass=3D"Object" id=3D"OBJ_PREFIX_DWT1440_com_zimbra_url" role=3D"link">


text-decoration: underline;"=20

href=3D"https://email.mailing.myhorsez.com/c/eJxM0EFvsjAYwPFP094k8NRSPPSgrx=

LfkWzZ5g7bxbT0EYtQSFtH8NMvLluy-z_5J79aRWwGP0uHU-gwRvTUSA46pyizfFVwUWQZp2eZi=

lpoYwzTwojslJ6gMFBAwRkoA6CplbCuXNZWm30VH6b08faxiUxUh5GVa2N3zcB9C20-kGX62S_c=

KdBOnmMcA2FrAiWBcpqmpJ_Pgw94S-qhJ1B2yhnrmlE1SKC8unDVofZWI2HlNaA_WkPYNmdLnhL=

ILzgTtu3Nkx7e6n92LzbjzAus3Ptzdtm-vtwO_3e0V7Y7WiOBraiXyrUqCco5dGSZRuzQYUw00i=

jv4eJeRfnrtPjj9LOX3_OvAAAA___BpGt8" target=3D"_blank" rel=3D"nofollow noope=

ner noreferrer">Uitschrijven
.








Project donation spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 Apr 2024 10:11:00 -0600

Received: from cpanel.ozlemtarim.com.tr ([92.42.34.146]:52198)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ruE3V-00000000JfQ-2rkE

for dave@doctor.nl2k.ab.ca;

Tue, 09 Apr 2024 10:10:48 -0600

Received: from 20.30.227.35.bc.googleusercontent.com ([35.227.30.20]:52976 helo=mkontakt.az)

by cpanel.ozlemtarim.com.tr with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1ru6nT-0000n7-28

for dave@doctor.nl2k.ab.ca;

Tue, 09 Apr 2024 11:25:41 +0300

Reply-To: marcb5734@gmail.com

From: marcbtesting@mkontakt.az

To: dave@doctor.nl2k.ab.ca

Subject: Project Funding.

Date: 09 Apr 2024 08:25:40 +0000

Message-ID: <20240409082540.D65232B9618902B6@mkontakt.az>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Ozlemtarim-MailScanner-Information: Please contact the ISP for more information

X-Ozlemtarim-MailScanner-ID: 1ru6nT-0000n7-28

X-Ozlemtarim-MailScanner: Found to be clean

X-Ozlemtarim-MailScanner-SpamCheck:

X-Ozlemtarim-MailScanner-From: marcbtesting@mkontakt.az

X-Spam-Status: No

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - cpanel.ozlemtarim.com.tr

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - mkontakt.az

X-Get-Message-Sender-Via: cpanel.ozlemtarim.com.tr: authenticated_id: aylin@ozlemyem.com.tr

X-Authenticated-Sender: cpanel.ozlemtarim.com.tr: aylin@ozlemyem.com.tr

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, We are independent Financial known as Marcb Finance

Consults and We are currently issuing Loans to both individuals and Corporate

bodies for Business and Projects Funding at Interest of 2.5% Rate for [...]





Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[92.42.34.146 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[92.42.34.146 listed in bl.score.senderscore.com]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[92.42.34.146 listed in ix.dnsbl.manitu.net]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=marcbtesting%40mkontakt.az;ip=92.42.34.146;r=doctor.nl2k.ab.ca]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[marcb5734(at)gmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Project Funding.

X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message

X-Antivirus-Status: Clean




w3.org/TR/html4/loose.dtd">









Greetings,

 
We are independent Financial known as Marcb =

Finance Consults and We are currently issuing Loans to both individuals and=

Corporate bodies for Business and Projects Funding at Interest of 2.5% Rat=

e for a period of 10 Years.



Our Minimum Funding is $1 Million and our Maximum Funding is $2.5 Billio=

n



Please get back if you are interested and with us all your financial tro=

ubles are over! Contact us today for more deatails
 

Regards=

,
Mr. Fred Binaza
Director of Marcb Finance and Investment 

=